This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft File: xC4WYonhwfw6mLVFQLzHMUbXSII.mft (raw, json) Hash identifier: Eudj52Nuzf3FW20fvhrpQghfnznbQ3iKEzjGyp6y1mw= Subject key identifier: 0B:D2:4A:5F:52:82:26:4D:04:31:A0:71:CD:D4:44:1E:99:6C:8C:8B Authority key identifier: C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82 Certificate issuer: /CN=c42e166289e1c1fc3a98b54540bcc73146d74882 Certificate serial: 019C420FF3F9A9EF22C3E829AA8863A359EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft Manifest number: 0F Signing time: Mon 09 Feb 2026 11:01:07 +0000 Manifest this update: Mon 09 Feb 2026 11:01:07 +0000 Manifest next update: Tue 10 Feb 2026 11:01:07 +0000 Files and hashes: 1: a5S2srHSsVmy5QkfkP_kc6cHShI.roa (hash: ci+zS+UEhLvr/I+Sc8XYpFmTIebXAv14ygCxwUbUvI8=) 2: xC4WYonhwfw6mLVFQLzHMUbXSII.crl (hash: fab7bod6iDZBiUlzi8MFnwQWCzlALcPboiBw5QMJyuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:f3:f9:a9:ef:22:c3:e8:29:aa:88:63:a3:59:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c42e166289e1c1fc3a98b54540bcc73146d74882 Validity Not Before: Feb 9 11:01:07 2026 GMT Not After : Feb 10 11:01:07 2026 GMT Subject: CN=0bd24a5f5282264d0431a071cdd4441e996c8c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:02:2b:af:9b:44:69:70:f0:d0:e5:65:be: 77:02:ed:3b:66:6e:5a:2e:42:88:3a:5d:5f:69:56: d9:e0:1f:ce:ae:c4:e3:35:fa:d9:73:42:c0:35:fd: 18:3c:a5:a8:e3:50:ed:fd:6c:52:fd:b9:12:16:53: 74:4a:f4:76:1d:52:3c:3f:b1:62:29:83:21:57:c1: 81:ac:6a:63:bf:3f:eb:97:bd:58:60:41:a4:ab:e5: a1:8c:71:7f:bf:e8:4d:d8:c7:12:b0:48:6d:6a:ab: 47:23:e5:89:8d:67:94:cf:b8:47:6e:18:45:7e:c9: 8e:2e:2f:a9:79:2c:7c:5c:a8:15:90:5f:0d:0f:69: 83:59:71:b3:5d:23:39:62:c4:f1:a8:bc:95:57:a2: 36:e4:13:ba:47:a6:1e:87:dc:9c:95:10:99:de:e5: 1c:bd:72:a2:d0:fe:28:4b:45:ea:b1:6d:9e:3a:17: c4:69:1d:d7:9a:a7:49:c0:68:1d:24:89:4e:ca:9e: 5d:2e:e2:a1:4e:c4:a7:82:a3:fb:f9:f2:d0:6b:96: 9f:7e:dd:fe:52:a5:d8:fd:35:92:b1:8e:f5:2d:16: cb:06:5f:2c:99:14:e6:a1:65:bb:8b:85:3a:83:c1: e7:c0:03:a6:8c:2c:f9:0c:c3:5c:34:5d:cc:a7:74: 7e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D2:4A:5F:52:82:26:4D:04:31:A0:71:CD:D4:44:1E:99:6C:8C:8B X509v3 Authority Key Identifier: keyid:C4:2E:16:62:89:E1:C1:FC:3A:98:B5:45:40:BC:C7:31:46:D7:48:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC4WYonhwfw6mLVFQLzHMUbXSII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b2598f-0631-4b5a-afe5-5ad9864532a7/1/xC4WYonhwfw6mLVFQLzHMUbXSII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:4d:7e:d8:d3:d4:37:15:8d:51:db:0f:e9:cd:35:60:94:2b: 9e:72:86:85:73:54:fa:a0:dc:2d:e3:7f:17:aa:aa:99:7e:26: ed:25:99:ab:42:8a:d1:9f:6a:03:49:10:29:08:cc:c4:28:73: d1:77:ea:4c:30:01:ff:33:51:9e:9c:7a:61:e2:50:c1:52:34: d7:d1:e3:50:f3:f5:fc:37:ed:7b:23:a2:8d:a2:cf:46:02:24: 68:89:80:c3:28:56:7c:d7:3a:d5:24:c6:2f:80:75:6a:a6:94: 65:41:0d:fe:ab:b8:98:9e:2a:c4:29:36:b8:c8:cf:d6:99:ae: d5:5f:52:b6:96:cd:3e:78:2b:6f:74:1c:b0:97:19:45:d0:d9: f3:3c:d2:58:99:c1:c2:16:55:02:2f:f9:6d:3d:0b:73:a0:85: a0:b1:13:a2:45:37:51:8c:e6:d9:22:ea:17:44:93:5b:ce:44: 03:ad:53:06:85:bf:52:cf:76:16:d4:75:06:a4:6e:36:42:1e: 5f:f1:d5:5c:ad:b6:21:28:44:15:5f:f2:ae:8c:71:ae:a1:23: b9:3e:71:e6:a4:3b:5f:37:8c:a3:ed:da:98:9c:18:a9:55:69: 0d:06:7c:f7:d0:7b:8c:c8:a4:51:1b:f8:f6:58:fc:86:6f:54: 0b:b3:23:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD/P5qe8iw+gpqohjo1nqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MmUxNjYyODllMWMxZmMzYTk4YjU0NTQwYmNjNzMxNDZk NzQ4ODIwHhcNMjYwMjA5MTEwMTA3WhcNMjYwMjEwMTEwMTA3WjAzMTEwLwYDVQQD EygwYmQyNGE1ZjUyODIyNjRkMDQzMWEwNzFjZGQ0NDQxZTk5NmM4YzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+ACK6+bRGlw8NDlZb53Au07Zm5a LkKIOl1faVbZ4B/OrsTjNfrZc0LANf0YPKWo41Dt/WxS/bkSFlN0SvR2HVI8P7Fi KYMhV8GBrGpjvz/rl71YYEGkq+WhjHF/v+hN2McSsEhtaqtHI+WJjWeUz7hHbhhF fsmOLi+peSx8XKgVkF8ND2mDWXGzXSM5YsTxqLyVV6I25BO6R6Yeh9yclRCZ3uUc vXKi0P4oS0XqsW2eOhfEaR3XmqdJwGgdJIlOyp5dLuKhTsSngqP7+fLQa5afft3+ UqXY/TWSsY71LRbLBl8smRTmoWW7i4U6g8HnwAOmjCz5DMNcNF3Mp3R+IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvSSl9SgiZNBDGgcc3URB6ZbIyLMB8GA1UdIwQY MBaAFMQuFmKJ4cH8Opi1RUC8xzFG10iCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEM0V1lvbmh3Znc2bUxWRlFMekhNVWJYU0lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9iMjU5OGYtMDYzMS00YjVhLWFmZTUt NWFkOTg2NDUzMmE3LzEveEM0V1lvbmh3Znc2bUxWRlFMekhNVWJYU0lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9iMjU5OGYtMDYzMS00YjVhLWFmZTUtNWFkOTg2NDUzMmE3 LzEveEM0V1lvbmh3Znc2bUxWRlFMekhNVWJYU0lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE01+2NPU NxWNUdsP6c01YJQrnnKGhXNU+qDcLeN/F6qqmX4m7SWZq0KK0Z9qA0kQKQjMxChz 0XfqTDAB/zNRnpx6YeJQwVI019HjUPP1/DfteyOijaLPRgIkaImAwyhWfNc61STG L4B1aqaUZUEN/qu4mJ4qxCk2uMjP1pmu1V9StpbNPngrb3QcsJcZRdDZ8zzSWJnB whZVAi/5bT0Lc6CFoLETokU3UYzm2SLqF0STW85EA61TBoW/Us92FtR1BqRuNkIe X/HVXK22IShEFV/yroxxrqEjuT5x5qQ7XzeMo+3amJwYqVVpDQZ899B7jMikURv4 9lj8hm9UC7MjLQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:27 2026 by rpki-client